Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/9Xd0DBO7M8r4UoWvzJy7V8iY7pc.roa
File: 9Xd0DBO7M8r4UoWvzJy7V8iY7pc.roa (raw, json)
Hash identifier: zwWHn+e3cArDubI2WC+k9htgfi2TUog59Z/wZAwdON8=
Subject key identifier: F5:77:74:0C:13:BB:33:CA:F8:52:85:AF:CC:9C:BB:57:C8:98:EE:97
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 01896D57048656FEEE3A55E469A4CF21E869
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/9Xd0DBO7M8r4UoWvzJy7V8iY7pc.roa
Signing time: Wed 19 Jul 2023 08:49:26 +0000
ROA not before: Wed 19 Jul 2023 08:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24837
IP address blocks: 176.108.178.0/23 maxlen: 24
176.108.176.0/23 maxlen: 24
176.108.180.0/23 maxlen: 24
176.108.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:57:04:86:56:fe:ee:3a:55:e4:69:a4:cf:21:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Jul 19 08:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f577740c13bb33caf85285afcc9cbb57c898ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:03:37:1f:a9:07:3d:c7:6f:14:f5:53:d9:
53:60:a0:92:4f:e2:53:2a:e6:7d:eb:7a:0f:e3:0a:
ee:4a:55:02:60:6d:70:5d:57:83:1b:e1:e5:57:b6:
14:aa:d4:73:60:40:52:6e:10:a2:8c:0a:98:26:fb:
e8:0e:34:52:e2:6d:bd:39:14:be:ba:63:3c:b2:02:
26:fe:32:59:74:31:e4:1b:e6:e7:5c:fa:b8:5c:e2:
38:c3:3c:80:d8:35:d6:2d:a7:11:78:6a:2d:e6:91:
2f:3f:5f:25:56:84:15:b4:4d:b3:56:a9:2b:6a:a9:
e9:33:88:ef:12:e0:1a:14:cd:20:9e:60:3d:46:fd:
b0:5f:45:c2:84:cc:42:f0:90:bf:ca:33:c4:8b:32:
a4:8e:f7:c7:31:73:1c:c3:53:b1:fd:64:11:8d:3c:
6c:78:20:6e:a7:fe:87:fd:6a:20:09:22:b8:52:f8:
70:8e:e4:cd:0f:97:43:57:08:c8:c2:7b:83:fb:36:
ae:57:c5:01:63:6d:af:8a:d3:6e:da:5e:03:ed:d4:
4e:13:c5:e5:39:78:4d:93:8e:ef:22:a3:03:b8:ab:
06:69:86:59:5e:16:25:9f:b6:cc:6f:78:9e:36:01:
7c:04:6c:36:a6:14:da:77:12:ae:99:01:c2:8b:ed:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:74:0C:13:BB:33:CA:F8:52:85:AF:CC:9C:BB:57:C8:98:EE:97
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/9Xd0DBO7M8r4UoWvzJy7V8iY7pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.176.0-176.108.181.255
176.108.183.0/24
Signature Algorithm: sha256WithRSAEncryption
16:27:bb:04:15:ff:fb:b9:f3:aa:08:b6:21:7c:c6:69:58:9e:
16:b2:ed:66:c0:f2:b7:c3:81:b9:bc:4a:06:58:20:f0:5b:91:
7d:80:85:1f:da:bc:5b:d5:45:07:52:c9:02:a1:d5:6d:ad:00:
ce:74:00:4f:0f:4a:50:d8:6b:a3:57:3e:a5:9f:2d:05:08:f5:
bc:67:66:3d:cc:cd:d6:76:30:e6:b9:e1:23:ef:b0:22:81:c0:
dc:d6:38:95:a0:ed:66:8d:43:ec:38:83:a1:3c:6e:9b:31:35:
20:99:18:82:a5:9b:4d:53:83:a4:78:ae:a4:9f:f1:8a:65:4e:
ef:c9:21:71:26:08:30:ce:a6:43:3e:2d:07:f4:2b:3a:05:3b:
1e:71:81:f1:e5:cd:95:d4:6d:f3:5f:89:07:5f:50:09:8e:5a:
77:8d:c4:b8:2c:6f:8c:a5:ef:9c:92:9f:0e:88:be:7d:97:b9:
ba:14:30:15:0f:84:30:0f:15:e5:4d:2c:ee:cb:f8:b0:38:f8:
16:9e:0e:fc:56:83:f2:80:f9:f6:2a:d5:47:9c:86:b5:00:85:
66:6b:f1:ad:07:49:b6:30:64:44:4c:90:a0:43:8e:61:31:ba:
27:cd:a2:32:f8:b4:72:b3:ae:e4:56:8e:07:e5:f7:3f:9d:2f:
59:34:49:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:01 2025 by rpki-client